Welcome to ImaginaryCTF 2024!

ictf{this_isnt_real}

Join our Discord community for updates and support! If you would like to do some more CTF after this competition, we do host daily CTF challenges on our Discord server as well. Join at https://discord.gg/ctf . You can find the flag for this challenge in the #imaginaryctf-2024 channel.

None

We've gotten console access to the rogue ship, but there isn't much time left. Hopefully you can figure out how to destroy it... before it's too late.

https://cybersharing.net/s/79c7e323d8f328f0 nc starship.chal.imaginaryctf.org 1337

gelatinous grudges garnish grevious gravestones

https://cybersharing.net/s/b8e3061c30fafbb0 nc gdbjail1.chal.imaginaryctf.org 1337

Ok nice

https://cybersharing.net/s/68520aa758a9087c nc ok-nice.chal.imaginaryctf.org 1337

rip rip

https://cybersharing.net/s/5a2e68432a14cefc nc gdbjail2.chal.imaginaryctf.org 1337

There's a discord bot in the notactf discord, and it's kind of suspicious. What are its responses hiding in plain sight?

!help

http://notactf.chal.imaginaryctf.org/

Can you steal the bank's money?

https://cybersharing.net/s/063920be8b96dcc5 nc 34.30.117.150 40000

I had some important stuff on my desktop, but I forgot the password to my virtual machine! Can you recover the flag? The flag is a lowercase string of characters with only letters and numbers, wrapped with ictf{}.

https://storage.googleapis.com/ictf-2024-files/Locked.7z

In another challenge, I made a "beautiful" frontend for this maze, but what if you didn't have any of that?

BONK.

https://cybersharing.net/s/f79f258f3799817c

socat FILE:`tty`,raw,echo=0 TCP:left-in-the-dark.chal.imaginaryctf.org:1337

There are two types of build systems - the ones people complain about, and the ones nobody uses.

https://cybersharing.net/s/148aced990c75c7b nc zable.chal.imaginaryctf.org 1337

Can you actually steal the bank's money?

https://cybersharing.net/s/7bd2b956c1e5974f nc 34.30.117.150 40001

A simple calculator to help you with your math homework.

https://cybersharing.net/s/b934d6f55e4fa123 nc calc.chal.imaginaryctf.org 1337

Try to read the flag.txt file.

https://cybersharing.net/s/67af3fd941707117 http://readme.chal.imaginaryctf.org/

dear diary, there is no LFI in this app

https://cybersharing.net/s/6f429753e4ae6d3c http://journal.chal.imaginaryctf.org/

Welcome to Python 2 Color, the world's best color picker from python code!

The flag is located in flag.txt.

https://cybersharing.net/s/593d1cd970182e64 http://p2c.chal.imaginaryctf.org/

Al₂O₃

https://cybersharing.net/s/c57444a64217c6c7 http://crystals.chal.imaginaryctf.org/

I've hidden my flag in an impenetrable maze! Try as you might, even though it's right there, you'll never get the flag!

http://the-amazing-race.chal.imaginaryctf.org/

Try to read the flag.txt file, again!

https://cybersharing.net/s/fbada004ac841993 http://readme2.chal.imaginaryctf.org/

solved_pwnlog(X) :- '1337haxor'(X).

Instancer does not work on Firefox

https://cybersharing.net/s/195726b4b2b92c2e https://klodd.imaginaryctf.org/challenge/pwning-en-logique

I love CTFs so much I decided to make my own platform! Can you solve all the challenges?

To test locally, just run the Dockerfile. Do not use the docker-compose. The flag for the challenge is the flag to Decrypt the Hash on the notactf dashboard.

https://cybersharing.net/s/a82a9e69a222b05b http://notactf.chal.imaginaryctf.org/

"If you wish to forget anything on the spot, make a note that this thing is to be remembered."

-Edgar Allan Poe

https://cybersharing.net/s/7ff8d3af017b2084 https://heapnotes.chal.imaginaryctf.org/ nc heapnotes-admin-bot.chal.imaginaryctf.org 1337

Check out an early development version of our forms application!

https://cybersharing.net/s/6ddb41cc33d0cb2c http://forms.chal.imaginaryctf.org/

楣瑦筴栴瑟楳渷彣桩渳獥

https://cybersharing.net/s/e964ad1143538987

Packet Tracer is a cross-platform visual simulation tool designed by Cisco Systems that allows users to create network topologies and imitate modern computer networks. The software allows users to simulate the configuration of Cisco routers and switches using a simulated command line interface. (same attachment as routed)

https://cybersharing.net/s/266989fb9d6c56b1

THIS IS AN OSINT CHALLENGE.

Greetings. You have been tasked with investigating the whereabouts of a potential recruit. To perform this top-secret background check, we must gather as much information as possible.

Please investigate Terrence Descartes. We know that his social accounts are relatively new, so please do not attack anything out of scope. For the sake of this series of challenges, nothing pertaining to Terry has existed before July 17, 2024. Do not investigate anything posted online before then.

None

This is an OSINT challenge.

i'm a dog mom i 🩷 dogs

Find where this picture was taken; submit your flag as ictf, both rounded to three decimal places. (example: ictf{-12.345_66.533})

https://cybersharing.net/s/4f1dbcbb01b5f98d

I didn't save my work...

https://storage.googleapis.com/ictf-2024-files/dump.vmem

Can you dig a bit deeper? (same attachment as packed)

There are some fake flags; this is unintentional. The real flag is not in plaintext.

md5(flag) = 17ef83e05f7f5410443994ac434b5823

https://cybersharing.net/s/266989fb9d6c56b1

I lost my dog in Minecraft. Can you find him? The name of the dog wrapped in ictf{} is the flag.

The dog's name is 16 hex characters, anything else is not correct.

https://cybersharing.net/s/1b3a43db9cb73c3d

THIS IS AN OSINT CHALLENGE.

Please keep digging into Descartes. We have reason to suspect that there might be more to him that it seems. Look into his trip last summer. See if you can find anything up with him.

Update - 7/20/24 00:25 UTC: The challenges cartesian-2 and cartesian-3 have been updated. Terrence has posted information online that will be relevant in solving these challenges. I apologize for the oversight.

None

THIS IS AN OSINT CHALLENGE.

We have reason to believe that Terrence is up to no good... we need to gather evidence. To do that, we need you to reset his password so we can have access to his accounts. With all the research you've done, it should be done in no time!

Update - 7/20/24 00:25 UTC: The challenges cartesian-2 and cartesian-3 have been updated. Terrence has posted information online that will be relevant in solving these challenges. I apologize for the oversight.

http://cartesian.chal.imaginaryctf.org/

Here is a picture of elves, taken from Wikipedia. Enjoy.

https://cybersharing.net/s/b2a282e40f33f5f9

Yuuichi woke up for his school, but the alarm audio seems to have an extra jingle in it. Maybe you can help him uncover the secret?

Hint: The flag length, including ictf and enclosing braces, is 39.

https://cybersharing.net/s/a86b20fed5d37917

windows user meets linux; pls secure my machine sussy baka. hope you like the surprise.

The password to unlock the disk is Pa$$w0rd10 and the credentials to log in are red:Pa$$w0rd10.

It looks like Forensics Question 2 on System Hardening 10 is not working as intended. The question should score with the answer 04-05-2027.

For Forensics Question 1 on System Hardening 10, one of the unauthorized programs isn't installed correctly, and doesn't show up as intended. One of the four unauthorized programs for the answer to this question is wapiti.

Forensics Question 7 (yes another one) is not working as intended. The answer to this question is system_process.py.

There has been a scoring error. Please put local_infile=0 into /etc/mysql/mysql.conf.d/mysql.cnf to get points.

https://storage.googleapis.com/ictf-2024-files/system-hardening-10.zip

yet another base64 decoding challenge

https://cybersharing.net/s/8c2a3e4e78a0161f

I think this is how signing works

https://cybersharing.net/s/01b6e22298efe760

Let's dance!

https://cybersharing.net/s/d0f066f686795481 nc tango.chal.imaginaryctf.org 1337

The best thinking has been done in solitude. The worst has been done in turmoil.

• Thomas A. Edison

https://cybersharing.net/s/f9a3f13bcb24aa55 nc solitude.chal.imaginaryctf.org 1337

LFSR's weakness comes from its linearity, so I come up with a new way to make it non-linear. Can you help me analyze it?

https://cybersharing.net/s/6009625608c1e15c

Isogeny cryptography seems so fun, so I build a new cryptosystem based on CSIDH.

https://cybersharing.net/s/cc0866769e1334be

linear congruential assembler

https://cybersharing.net/s/c82de3be55386ac6 nc lcasm.chal.imaginaryctf.org 1337

The keys are obfuscated by a weird magic operation.

https://cybersharing.net/s/9f5121299cc94ef5

The "capac" challenge from Crypto CTF 2024 can be directly solved by factorizing the modulus, but is it still solvable if the modulus is much larger?

Original challenge is made by @factoreal.

https://cybersharing.net/s/df4b7034ef8765de

i like elf reversing

https://cybersharing.net/s/8330af8ef6c673a8

Simple equations... but in BF?!!!

https://cybersharing.net/s/3c057ae67ff81f6e

Rust! Enjoy 😃 Note: The message that produces the provided encryption is the flag.

https://cybersharing.net/s/4a47f2774279abd1

Can you reverse this flag mangler? The output is b4,31,8e,02,af,1c,5d,23,98,7d,a3,1e,b0,3c,b3,c4,a6,06,58,28,19,7d,a3,c0,85,31,68,0a,bc,03,5d,3d,0b

The input only contains lowercase letters, numbers, underscore, and braces .

https://cybersharing.net/s/9d9e51acc89fe230

What's easier way than verifying flag contents more times than required?

https://cybersharing.net/s/2cde6e7326672a26

The keepers of the Watchdog vault have forgotten their password. Can you help them retrieve it?

https://cybersharing.net/s/ce1a0365f0818a1b

As foretold, the revenge of SVM from round 46 is here!

https://cybersharing.net/s/428d6dd7091020d4

Can you find what this (very inefficient) VM is doing?

https://cybersharing.net/s/14496cbd59d8e497

%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%64949c%*c%c%c%hn%c%c%c%c%c%c%c%545c%hn%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%hhn%*c%*74$c%*74$c%*74$c%*74$c%*74$c%*74$c%*74$c%*74$c%*74$c%*74$c%*74$c%*74$c%*74$c%*74$c%8c%75$hhn

https://cybersharing.net/s/9fce8afd4b22e25b

While exploring twisted corridors of an ancient pyramid, you find a weird scroll with a camel drawn on it. You pick it up, but don't have too much time to inspect it...

https://cybersharing.net/s/49d734004a8b3201

Back to the old school.

https://cybersharing.net/s/9325732cdfe6a6ab nc imgstore.chal.imaginaryctf.org 1337

Just your typical ROP challenge

The flag is in flag.txt.

https://cybersharing.net/s/5501f4c1c9f47710 nc ropity.chal.imaginaryctf.org 1337

One write to rule them all, one write to—never mind.

https://cybersharing.net/s/1d6e770a635d9ee1 nc onewrite.chal.imaginaryctf.org 1337

this format string is not meant to be exploited.

https://cybersharing.net/s/a2cf5e743d143307 nc fermat.chal.imaginaryctf.org 1337

Did you know that our team at ImaginaryCTF has a band called ictf-band? Formed in 2024, our band consists of four talented musicians and one incredible vocalist, each highly skilled in their respective roles.

Recently, we've encountered challenges in coming up with new song titles and writing lyrics. To address this, we've developed an innovative application called ictf-band, accessible to the public via Command Line Interface (CLI). This application allows users to contribute song titles and lyrics, with all responses and data being saved for our creative process.

As we continue to enhance our application, we're seeking insights from cybersecurity experts to identify potential vulnerabilities. As a vulnerability researcher, your expertise in uncovering and addressing these vulnerabilities is invaluable. We're particularly interested in understanding the worst possible outcomes to ensure our application remains secure and robust.

https://cybersharing.net/s/124862fa38fb4472 nc ictf-band.chal.imaginaryctf.org 1337

Just your typical ROP challenge (files and remote are the same as in ropity; you must get a shell)

https://cybersharing.net/s/5501f4c1c9f47710 nc ropity.chal.imaginaryctf.org 1337

time stands still when you're afraid

Challenge runs on ubuntu:22.04@sha256:ac58ff7fe25edc58bdf0067ca99df00014dbd032e2246d30a722fa348fd799a5

https://cybersharing.net/s/3e6ac45d40585f96 nc hopper.chal.imaginaryctf.org 1337

Not Secure File Transfer Protocol Daemon

All credit to https://github.com/thinxer/ftp_project

Instancer does not work on Firefox

https://cybersharing.net/s/5f99f810bf259cbc https://klodd.imaginaryctf.org/challenge/nsftpd